Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2015-0836

Disclosure Date: February 25, 2015 •
CVE-2015-0836
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
n/a
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

  • mozilla

Products

  • firefox,
  • firefox 0.1,
  • firefox 0.10,
  • firefox 0.10.1,
  • firefox 0.2,
  • firefox 0.3,
  • firefox 0.4,
  • firefox 0.5,
  • firefox 0.6,
  • firefox 0.6.1,
  • firefox 0.7,
  • firefox 0.7.1,
  • firefox 0.8,
  • firefox 0.9,
  • firefox 0.9.1,
  • firefox 0.9.2,
  • firefox 0.9.3,
  • firefox 1.0,
  • firefox 1.0.1,
  • firefox 1.0.2,
  • firefox 1.0.3,
  • firefox 1.0.4,
  • firefox 1.0.5,
  • firefox 1.0.6,
  • firefox 1.0.7,
  • firefox 1.0.8,
  • firefox 1.4.1,
  • firefox 1.5,
  • firefox 1.5.0.1,
  • firefox 1.5.0.10,
  • firefox 1.5.0.11,
  • firefox 1.5.0.12,
  • firefox 1.5.0.2,
  • firefox 1.5.0.3,
  • firefox 1.5.0.4,
  • firefox 1.5.0.5,
  • firefox 1.5.0.6,
  • firefox 1.5.0.7,
  • firefox 1.5.0.8,
  • firefox 1.5.0.9,
  • firefox 1.5.1,
  • firefox 1.5.2,
  • firefox 1.5.3,
  • firefox 1.5.4,
  • firefox 1.5.5,
  • firefox 1.5.6,
  • firefox 1.5.7,
  • firefox 1.5.8,
  • firefox 1.8,
  • firefox 10.0,
  • firefox 10.0.1,
  • firefox 10.0.10,
  • firefox 10.0.11,
  • firefox 10.0.12,
  • firefox 10.0.2,
  • firefox 10.0.3,
  • firefox 10.0.4,
  • firefox 10.0.5,
  • firefox 10.0.6,
  • firefox 10.0.7,
  • firefox 10.0.8,
  • firefox 10.0.9,
  • firefox 11.0,
  • firefox 12.0,
  • firefox 13.0,
  • firefox 13.0.1,
  • firefox 14.0,
  • firefox 14.0.1,
  • firefox 15.0,
  • firefox 15.0.1,
  • firefox 16.0,
  • firefox 16.0.1,
  • firefox 16.0.2,
  • firefox 17.0,
  • firefox 17.0.1,
  • firefox 17.0.10,
  • firefox 17.0.11,
  • firefox 17.0.2,
  • firefox 17.0.3,
  • firefox 17.0.4,
  • firefox 17.0.5,
  • firefox 17.0.6,
  • firefox 17.0.7,
  • firefox 17.0.8,
  • firefox 17.0.9,
  • firefox 18.0,
  • firefox 18.0.1,
  • firefox 18.0.2,
  • firefox 19.0,
  • firefox 19.0.1,
  • firefox 19.0.2,
  • firefox 2.0,
  • firefox 2.0.0.1,
  • firefox 2.0.0.10,
  • firefox 2.0.0.11,
  • firefox 2.0.0.12,
  • firefox 2.0.0.13,
  • firefox 2.0.0.14,
  • firefox 2.0.0.15,
  • firefox 2.0.0.16,
  • firefox 2.0.0.17,
  • firefox 2.0.0.18,
  • firefox 2.0.0.19,
  • firefox 2.0.0.2,
  • firefox 2.0.0.20,
  • firefox 2.0.0.3,
  • firefox 2.0.0.4,
  • firefox 2.0.0.5,
  • firefox 2.0.0.6,
  • firefox 2.0.0.7,
  • firefox 2.0.0.8,
  • firefox 2.0.0.9,
  • firefox 20.0,
  • firefox 20.0.1,
  • firefox 21.0,
  • firefox 22.0,
  • firefox 23.0,
  • firefox 23.0.1,
  • firefox 24.0,
  • firefox 24.1,
  • firefox 24.1.1,
  • firefox 25.0,
  • firefox 25.0.1,
  • firefox 26.0,
  • firefox 27.0,
  • firefox 27.0.1,
  • firefox 28.0,
  • firefox 29.0,
  • firefox 29.0.1,
  • firefox 3.0,
  • firefox 3.0.1,
  • firefox 3.0.10,
  • firefox 3.0.11,
  • firefox 3.0.12,
  • firefox 3.0.13,
  • firefox 3.0.14,
  • firefox 3.0.15,
  • firefox 3.0.16,
  • firefox 3.0.17,
  • firefox 3.0.18,
  • firefox 3.0.19,
  • firefox 3.0.2,
  • firefox 3.0.3,
  • firefox 3.0.4,
  • firefox 3.0.5,
  • firefox 3.0.6,
  • firefox 3.0.7,
  • firefox 3.0.8,
  • firefox 3.0.9,
  • firefox 3.5,
  • firefox 3.5.1,
  • firefox 3.5.10,
  • firefox 3.5.11,
  • firefox 3.5.12,
  • firefox 3.5.13,
  • firefox 3.5.14,
  • firefox 3.5.15,
  • firefox 3.5.16,
  • firefox 3.5.17,
  • firefox 3.5.18,
  • firefox 3.5.19,
  • firefox 3.5.2,
  • firefox 3.5.3,
  • firefox 3.5.4,
  • firefox 3.5.5,
  • firefox 3.5.6,
  • firefox 3.5.7,
  • firefox 3.5.8,
  • firefox 3.5.9,
  • firefox 3.6,
  • firefox 3.6.10,
  • firefox 3.6.11,
  • firefox 3.6.12,
  • firefox 3.6.13,
  • firefox 3.6.14,
  • firefox 3.6.15,
  • firefox 3.6.16,
  • firefox 3.6.17,
  • firefox 3.6.18,
  • firefox 3.6.19,
  • firefox 3.6.2,
  • firefox 3.6.20,
  • firefox 3.6.21,
  • firefox 3.6.22,
  • firefox 3.6.23,
  • firefox 3.6.24,
  • firefox 3.6.25,
  • firefox 3.6.26,
  • firefox 3.6.27,
  • firefox 3.6.28,
  • firefox 3.6.3,
  • firefox 3.6.4,
  • firefox 3.6.6,
  • firefox 3.6.7,
  • firefox 3.6.8,
  • firefox 3.6.9,
  • firefox 30.0,
  • firefox 31.0,
  • firefox 31.1.0,
  • firefox 32.0,
  • firefox 33.0,
  • firefox 34.0.5,
  • firefox 4.0,
  • firefox 4.0.1,
  • firefox 5.0,
  • firefox 5.0.1,
  • firefox 6.0,
  • firefox 6.0.1,
  • firefox 6.0.2,
  • firefox 7.0,
  • firefox 7.0.1,
  • firefox 8.0,
  • firefox 8.0.1,
  • firefox 9.0,
  • firefox 9.0.1,
  • firefox esr 31.0,
  • firefox esr 31.1,
  • firefox esr 31.1.1,
  • firefox esr 31.2,
  • firefox esr 31.3,
  • firefox esr 31.4,
  • firefox esr 31.5,
  • thunderbird,
  • thunderbird 31.0,
  • thunderbird 31.1.2,
  • thunderbird 31.2,
  • thunderbird 31.3

References

Canonical
CVE-2015-0836 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0836)
BID-72742 (http://www.securityfocus.com/bid/72742)
Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1117406
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00006.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1115776
https://bugzilla.mozilla.org/show_bug.cgi?id=1107009
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00007.html
http://rhn.redhat.com/errata/RHSA-2015-0642.html
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00008.html
http://www.mozilla.org/security/announce/2015/mfsa2015-11.html
USN-2506-1 (http://www.ubuntu.com/usn/USN-2506-1)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
GLSA-201504-01 (https://security.gentoo.org/glsa/201504-01)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html
http://rhn.redhat.com/errata/RHSA-2015-0265.html
SECTRACK-1031792 (http://www.securitytracker.com/id/1031792)
https://bugzilla.mozilla.org/show_bug.cgi?id=1128196
DSA-3174 (http://www.debian.org/security/2015/dsa-3174)
https://bugzilla.mozilla.org/show_bug.cgi?id=1111248
https://bugzilla.mozilla.org/show_bug.cgi?id=1111243
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1119579
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
DSA-3179 (http://www.debian.org/security/2015/dsa-3179)
https://bugzilla.mozilla.org/show_bug.cgi?id=1096138
http://rhn.redhat.com/errata/RHSA-2015-0266.html
SECTRACK-1031791 (http://www.securitytracker.com/id/1031791)
https://bugzilla.mozilla.org/show_bug.cgi?id=1123882
http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html
USN-2505-1 (http://www.ubuntu.com/usn/USN-2505-1)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00001.html
https://bugzilla.mozilla.org/show_bug.cgi?id=1124018

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis